Privacy Policy
29/10/2026 · v46
Controller
Namaste India OÜ, registry code 16760782, Keskväljak 13a, Keila, Harjumaa 76608, Estonia. Privacy contact: info@namasteindia.ee, +372 5555 8568.
Data, purposes and lawful bases
Orders use name, telephone, delivery address/unit, food, quantities, amounts, requested time and instructions. Reservations use guest count and optional email. Feedback uses a rating and comment. Processing to enter and fulfil the contract relies on GDPR Article 6(1)(b), legal accounting duties on 6(1)(c), and proportionate security, abuse prevention and legal claims on legitimate interests under 6(1)(f). Do not put unnecessary sensitive information in notes.
Recipients and services
Authorised restaurant staff access orders; drivers access delivery details they need. Zone supplies hosting. Geoapify receives address searches and coordinates for address and driving-route calculation, not customer names, telephone numbers or apartment/door-code notes. Opening a map/Waze link sends the destination to that map service. WhatsApp/social links use the selected provider’s terms. Montonio is not yet processing customer checkout payments; payment-data information will be updated before activation.
Retention
Operational order-request personal data is retained for up to 30 days from creation; expired records are removed on subsequent system use. Reservations are removed 30 days after their scheduled date. Accounting source documents are held separately for seven years from the end of the relevant financial year; this does not mean retaining a full customer profile for seven years. Dispute evidence is retained only as needed to handle the claim and for the applicable limitation period. Standard Zone backups are retained for 14 days, so deleted data may remain in restricted recovery copies during that cycle. Technical/security logs are retained for troubleshooting, abuse detection and service security through the hosting service’s rotating logs; incident evidence is kept only through resolution and any relevant claim period. Logs and backups are not used for marketing. Geoapify states that successful API-request logs are generally retained for no longer than 24 hours before usage statistics are aggregated.
Browser storage, cookies and marketing
Ordering uses a necessary session cookie to secure requests and prevent abuse. Staff authentication uses separate secure session cookies. Basket and language preferences may remain in local browser storage until removed or browser data is cleared. My orders shows private references saved in that browser for up to 30 days; its removal button clears those saved references. Fonts, icons and some layout resources may load from Google Fonts, Cloudflare cdnjs, jsDelivr and Tailwind CDN, which receive technical connection data including IP addresses. Our ordering code does not subscribe customers to an advertising pixel or marketing list. Automatic discount reminders are off. Marketing requires a separate valid basis and an opt-out.
Rights, safeguards and transfers
Request access, correction, erasure, restriction, applicable portability or object to legitimate-interest processing at info@namasteindia.ee. Consent can be withdrawn for future processing. We normally reply within one month and may proportionately verify identity. Complaints may be made to the Estonian Data Protection Inspectorate: https://www.aki.ee/. Keep order-status links private. We use HTTPS and password-protected role access. Zone hosting and Geoapify core systems operate in Europe; international CDN and external-link services may process technical data outside the EEA under their published privacy information. Provider transfer mechanisms may include an applicable adequacy decision or EU Standard Contractual Clauses. Contact info@namasteindia.ee for information about applicable service safeguards. Restaurant staff decide whether to accept an order; distance and pricing calculations do not automatically make decisions significantly affecting individual rights.
Provider privacy information
Zone: https://www.zone.ee/en/zone-media-ou-privacy-policy/ · Geoapify: https://www.geoapify.com/privacy-policy/ · Google: https://policies.google.com/privacy · Cloudflare: https://www.cloudflare.com/privacypolicy/ · jsDelivr: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net